aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPaul Selkirk <paul@psgd.org>2017-10-15 21:36:57 -0400
committerPaul Selkirk <paul@psgd.org>2017-10-15 21:36:57 -0400
commit12a3c63b75044b207dd7982ce3ed170231bd4467 (patch)
treee19ab0bb70b515ca19f0c5d2d286135d2e79ac55
parentec25ec271ef243aa043db69d091de2e2015bc3af (diff)
Correctly mark "unsecure" KEK as erased.
-rw-r--r--ks.h1
-rw-r--r--ks_token.c2
2 files changed, 2 insertions, 1 deletions
diff --git a/ks.h b/ks.h
index b95216d..7bfdd61 100644
--- a/ks.h
+++ b/ks.h
@@ -139,6 +139,7 @@ typedef struct {
#endif
} hal_ks_pin_block_t;
+#define FLASH_KEK_NOT_SET 0
#define FLASH_KEK_SET 0x33333333
/*
diff --git a/ks_token.c b/ks_token.c
index a6cad0e..b96d279 100644
--- a/ks_token.c
+++ b/ks_token.c
@@ -640,7 +640,7 @@ hal_error_t hal_mkm_flash_erase(const size_t len)
hal_ks_pin_block_t new_data = block->pin;
- new_data.kek_set = FLASH_KEK_SET;
+ new_data.kek_set = FLASH_KEK_NOT_SET;
memset(new_data.kek, 0, len);
err = update_pin_block(b, block, &new_data);